
Flickr, the video hosting platform, has alerted users about
“ a security issue involving one of our third-party service providers that may have affected some of your personal information.”
The company was
alerted to a vulnerability in a system operated by one of its email service providers, which may have exposed member information to unauthorized access.
Flickr shut down
access to the affected system within hours of learning about the issue. But the following information may have been exposed, depending on the account:
- Name & email
address
- Flickr username & account type
- IP address & general location
- Activity on
Flickr
advertisement
advertisement
Passwords were not revealed.
In response, Flickr has also removed all links to the vulnerable endpoint and notified the
service provider, which has not been named. It also alerted data protection authorities and is now conducting its own review and strengthening its security practices with third-party
providers.
Security Week reported that it has not seen any threat actor claiming it had stolen the data.
Meanwhile, Flickr adds,
“We sincerely apologize for this incident and for the concern it may cause.”
The firm advises users, “Be cautious of phishing emails referencing your Flickr
account. We will never ask for your password via email. Review your account settings at flickr.com for anything unexpected.”